CVE-2005-2428 PoC — IBM Lotus Domino WebMail信息泄露漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/workflows/lotus-domino-workflow.yaml

Associated Vulnerability

Title:IBM Lotus Domino WebMail信息泄露漏洞 (CVE-2005-2428)
Description:IBM Lotus Domino WebMail是IBM消息传递解决方案组件，提供基本的基于浏览器的Lotus Domino电子邮件访问。 Lotus Domino处理储存用户口令的过程存在问题，可能造成信息用户口令信息泄露。默认下Lotus Domino的主目录数据库names.nsf是所有用户都可读的，因此，所有用户都可以浏览人员项。在非特权用户浏览人员项时，"Internet Password"字段是空的，表示用户不能浏览口令哈希。但是，如果编辑了Web页面的话(在Internet Explore

Description

A simple workflow that runs all Lotus Domino related nuclei templates on a given target.

File Snapshot


 id: lotus-domino-workflow

info:
  name: Lotus Domino Security Checks
  author: CasperGN
  descripti

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!